Vulnerability in Abb Rex640 Pcl1
CVE-2022-1596
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
EPSS: 0.006 (46.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Abb Rex640 Pcl1 — versions unspecified
- Abb Rex640_pcl1
- Abb Rex640_pcl1_firmware
- Abb Rex640 Pcl2 — versions unspecified
- Abb Rex640_pcl2
- Abb Rex640_pcl2_firmware
- Abb Rex640 Pcl3 — versions unspecified
- Abb Rex640_pcl3
- Abb Rex640_pcl3_firmware
Weakness classification (CWE)
References
- cybersecurity@ch.abb.com (x_refsource_MISC, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-1596?
- CVE-2022-1596 is a medium-severity vulnerability in Abb Rex640 Pcl1, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 6.5/10. Published 2022-06-21.
- How severe is CVE-2022-1596?
- Medium severity. CVSS v3 base score is 6.5 out of 10.